Commit Graph

Select branches

Hide Pull Requests

main

archive/engine-change-scoped-evidence-pass

archive/engine-typescript

archive/fix-mechanisms

archive/trained-classifier

archive/unseen-eval

v0.1.0

v1.0.0

v1.1.0

v1.2.0-alpha.1

v2.0.0

v2.0.1

Mono Color

• cfd1493d69 spec(contributor-scan): record 7.8 verification and one bypass Marius CiepluchandClaude Fable 5.1 2026-09-22 21:45:09 +02:00
• a4042fdb27 fix(scan): portion the evidence pass so a single kill is never the whole pass Marius CiepluchandClaude Fable 5.1 2026-09-22 21:44:45 +02:00
• a8b226a5c8 feat(cpg): portion the work instead of capping it -- a kill keeps what finished Marius CiepluchandClaude Fable 5.1 2026-09-22 21:03:04 +02:00
• 1c9d7f501f docs(status): record that PHP reaches its declared target Marius CiepluchandClaude Opus 5 2026-09-22 19:38:23 +02:00
• d4ce173592 measure(m3): the declared PHP target is detected, and the replay budget is sized Marius CiepluchandClaude Opus 5 2026-09-22 19:34:49 +02:00
• f09d788568 test(census): record which regions a budget actually reached Marius CiepluchandClaude Opus 5 2026-09-22 18:52:51 +02:00
• 8874145874 measure(contributor-scan): confirm 7.7 costs the small population nothing Marius CiepluchandClaude Opus 5 2026-09-22 13:56:00 +02:00
• 7ad3decf9a measure(contributor-scan): 7.7 makes a large PHP population affordable, 0 findings to 125 Marius CiepluchandClaude Opus 5 2026-09-22 13:55:44 +02:00
• d0026f4ea5 fix(scan): check the arbitration reserve per batch, not per query kind Marius CiepluchandClaude Opus 5 2026-09-22 13:12:21 +02:00
• 8cf1b383d4 fix(scan): keep budget back for arbitration, because rows are not findings Marius CiepluchandClaude Opus 5 2026-09-22 12:21:12 +02:00
• 18d0319436 fix(cpg): a query that exceeds its own ceiling no longer cancels the scan Marius CiepluchandClaude Opus 5 2026-09-22 11:26:54 +02:00
• 6365c49849 feat(scan): size a taint batch by the sink work it implies, in the ranker order Marius CiepluchandClaude Opus 5 2026-09-22 10:52:38 +02:00
• 9910dd18b9 measure(php): the query cost is the matched sink count, and the blocker is identified Marius CiepluchandClaude Opus 5 2026-09-22 09:53:52 +02:00
• 4a5bf0aaf9 test(cpg): log what each engine invocation costs and whether it answered Marius CiepluchandClaude Opus 5 2026-09-22 09:05:47 +02:00
• 617fab157c measure(php): batch size is not the cost, and the curve is sublinear Marius CiepluchandClaude Opus 5 2026-09-22 08:46:23 +02:00
• 3b6e642433 fix(scan): prune a tier-zero question unless ITS partition is the incomplete one Marius CiepluchandClaude Opus 5 2026-09-22 08:06:15 +02:00
• b0500ecfa0 measure(contributor-scan): first ontology coverage run, and it found a family we do not have Marius CiepluchandClaude Opus 5 2026-09-21 17:19:59 +02:00
• 0beae46ba9 feat(contributor-scan): ask a repository what it calls that the ontology does not model Marius CiepluchandClaude Opus 5 2026-09-21 17:12:24 +02:00
• 032efc926c spec(pre-push-safety-net): a harness must report the cause of its own failure Marius CiepluchandClaude Opus 5 2026-09-21 16:29:39 +02:00
• e245040855 spec: name the fact tables an ontology, and commit to a general-purpose hook Marius CiepluchandClaude Opus 5 2026-09-21 16:29:23 +02:00
• 3a18d025f4 spec(m4): the independent population must hold a multi-language repository Marius CiepluchandClaude Opus 5 2026-09-21 16:22:25 +02:00
• a487d1dfb5 fix(push): a gap from another language partition no longer blocks admission Marius CiepluchandClaude Opus 5 2026-09-21 13:50:38 +02:00
• d105d2f84a fix(scan): carry the partition in both census passes, and PHP completes 120 of 127 Marius CiepluchandClaude Opus 5 2026-09-21 13:45:00 +02:00
• 29cef32bac fix(scan): scope a partition census gap to its own partition, and write the rule down Marius CiepluchandClaude Opus 5 2026-09-21 13:21:27 +02:00
• c93669c34f fix(scan): a language boundary is a declared limit, not a graph-integrity failure Marius CiepluchandClaude Opus 5 2026-09-21 12:04:28 +02:00
• 73e9c1fed6 measure(m3): two languages in a repository defeat completion, and so defeat admission Marius CiepluchandClaude Opus 5 2026-09-21 10:57:19 +02:00
• 6bd6e3531e test(m3): let the transfer replay take a region budget Marius CiepluchandClaude Opus 5 2026-09-21 10:55:22 +02:00
• 5b7288aa58 spec(pre-push-safety-net): amend the sequence and declare the shippable scope Marius CiepluchandClaude Opus 5 2026-09-21 10:41:25 +02:00
• 1f51c82b51 fix(census): stop hiding findings behind a question-outcome count, and correct the PHP record Marius CiepluchandClaude Opus 5 2026-09-20 19:22:04 +02:00
• 99abe12062 measure(php): quantify what remains once the malformed-CPG bug is excluded Marius CiepluchandClaude Opus 5 2026-09-20 18:13:25 +02:00
• 2c5fba55ef fix(semantic-facts): reach the deserialization form WordPress actually writes Marius CiepluchandClaude Opus 5 2026-09-20 18:09:57 +02:00
• 3bd844055c fix(config): report every permissive setting in a file, not the first one Marius CiepluchandClaude Opus 5 2026-09-20 16:30:04 +02:00
• e6bdac46e2 fix(access-control): decide the sibling scope, and see identity a destructuring spelled away Marius CiepluchandClaude Opus 5 2026-09-20 15:16:03 +02:00
• c0427e6ceb feat(access-control): model the collection read, by argument shape rather than by name Marius CiepluchandClaude Opus 5 2026-09-20 12:10:27 +02:00
• 102a21fc4e feat(access-control): carry the obligation across the route-and-DAO split Marius CiepluchandClaude Opus 5 2026-09-20 08:57:32 +02:00
• f31ef862a7 fix(output-encoding): ask about the server half, and say what the family cannot decide Marius CiepluchandClaude Opus 5 2026-09-19 20:38:39 +02:00
• 57f5a3f0dc fix(semantic-facts): give untrusted destination the clients a Node server calls Marius CiepluchandClaude Opus 5 2026-09-19 17:55:31 +02:00
• 4e2619e248 feat(pre-push-safety-net): census the declared families and fix a sink matched in a comment Marius CiepluchandClaude Opus 5 2026-09-19 17:39:08 +02:00
• 770bae0e9e test(m3): record the PHP blocker as open, six hypotheses eliminated Marius CiepluchandClaude Opus 5 2026-09-19 13:24:26 +02:00
• 6089c67bf6 fix(cpg): report the line that names an engine failure, not its frames Marius CiepluchandClaude Opus 5 2026-09-18 17:58:42 +02:00
• dfc29238b5 fix(cli): make the stage log reachable, nothing configured logging (M3) Marius CiepluchandClaude Opus 5 2026-09-18 15:50:08 +02:00
• 45f9d6562e feat(push): report what each stage cost as it finishes (M3 diagnosis) Marius CiepluchandClaude Opus 5 2026-09-18 14:31:53 +02:00
• 537483657d test(m3): PHP still not established; blocker is the dataflow execution pass Marius CiepluchandClaude Opus 5 2026-09-18 13:22:05 +02:00
• aa66429a82 fix(cpg): answer a failed batch in parts instead of losing it whole (M3) Marius CiepluchandClaude Opus 5 2026-09-18 12:47:50 +02:00
• d64abc2d43 test(m3): PHP transfer not established; the taint batch cannot answer PMPro Marius CiepluchandClaude Opus 5 2026-09-17 21:01:51 +02:00
• bb72fcd413 test(m3): Python transfer detects all three declared targets (M3 13.1) Marius CiepluchandClaude Opus 5 2026-09-17 18:17:31 +02:00
• fc5dc453b6 test(ranker): every question now completes on the real case (M1b 12.4) Marius CiepluchandClaude Opus 5 2026-09-17 14:17:51 +02:00
• 573b764bbb fix(ranker): scope a region to the file that defines its handler (M1b 12.4) Marius CiepluchandClaude Opus 5 2026-09-17 14:04:39 +02:00
• ca2c3a8b5f test(contributor-scan): record the group 12 end state (M1b 12.1-12.3) Marius CiepluchandClaude Opus 5 2026-09-17 13:44:20 +02:00
• b95a371b7e feat(contributor-scan): name the function a question cannot locate (M1b 12.3) Marius CiepluchandClaude Opus 5 2026-09-17 13:28:40 +02:00
• 3e4ab8d219 test(contributor-scan): measure the per-family context effect (M1b 12.2) Marius CiepluchandClaude Opus 5 2026-09-17 11:36:51 +02:00
• a91551e547 feat(contributor-scan): give each family its own change context (M1b 12.2) Marius CiepluchandClaude Opus 5 2026-09-17 11:19:30 +02:00
• 4ee31142ab fix(pre-push-safety-net): take the operation symbol from the call (M1b 12.1) Marius CiepluchandClaude Opus 5 2026-09-17 09:56:50 +02:00
• 6653b6aca8 spec(pre-push-safety-net): record the M2 direction, do not rebuild a graph per push Marius CiepluchandClaude Opus 5 2026-09-17 09:53:35 +02:00
• ed0f12b593 revert: JavaScript one-start build did not deliver in the push path (M2 11.6) Marius CiepluchandClaude Opus 5 2026-09-17 09:04:44 +02:00
• f04a839181 perf(cpg): build JavaScript in one engine start, gated on the census (M2 11.6) Marius CiepluchandClaude Opus 5 2026-09-17 08:44:48 +02:00
• 7acb897d77 fix(cpg): stop a failed session start from consuming the transaction budget Marius CiepluchandClaude Opus 5 2026-09-17 08:35:57 +02:00
• ffbd864195 test(runtime): measure the seven-class profile with the session; NO-GO (M2 11.5) Marius CiepluchandClaude Opus 5 2026-09-17 08:12:37 +02:00
• 7fc6713e78 test(cpg): confirm the session stays alive and halves query time (M2 11.4) Marius CiepluchandClaude Opus 5 2026-09-17 07:50:04 +02:00
• 566b862b0a fix(cpg): end an engine session with the transaction that owns it (M2) Marius CiepluchandClaude Opus 5 2026-09-16 21:15:00 +02:00
• d2362cd18d fix(cpg): carry the engine's own account when a session request fails (M2) Marius CiepluchandClaude Opus 5 2026-09-16 21:00:24 +02:00
• fc69055a32 feat(cpg): add an explicit environment switch for the engine session (M2 11.3) Marius CiepluchandClaude Opus 5 2026-09-16 20:43:50 +02:00
• 87f7976a58 perf(cpg): run the overlay pass in-session and verify it saved (M2 11.4) Marius CiepluchandClaude Opus 5 2026-09-16 20:41:11 +02:00
• d93dee9f1a test(cpg): prove transport equivalence for every shipped query kind (M2 11.2) Marius CiepluchandClaude Opus 5 2026-09-16 20:37:47 +02:00
• 7e3f12bc00 feat(cpg): add a transaction-owned engine session and route it opt-in (M2 11.1, 11.3) Marius CiepluchandClaude Opus 5 2026-09-16 20:24:34 +02:00
• cec1c4a428 feat(pre-push-safety-net): render the experimental evaluation explanation (M1b 10.10) Marius CiepluchandClaude Opus 5 2026-09-16 19:59:12 +02:00
• 57d6ddcbba test(pre-push-safety-net): record the M1b exit run (task 10.9) Marius CiepluchandClaude Opus 5 2026-09-16 19:11:03 +02:00
• 541ee5813e feat(pre-push-safety-net): carry query-to-operation provenance (M1b 10.8) Marius CiepluchandClaude Opus 5 2026-09-16 18:55:31 +02:00
• 9a67f54ea1 fix(pre-push-safety-net): bind dependency gaps to the candidate (M1b 10.7) Marius CiepluchandClaude Opus 5 2026-09-16 18:52:04 +02:00
• b8b46f1c19 test(pre-push-safety-net): record the M1b production comparison on NodeGoat Marius CiepluchandClaude Opus 5 2026-09-16 18:06:39 +02:00
• bc68000e93 fix(pre-push-safety-net): apply the exclusion distinction inside comparison too Marius CiepluchandClaude Opus 5 2026-09-16 17:51:49 +02:00
• c1cc332bc1 feat(pre-push-safety-net): stop declared exclusion vetoing first-party answers (M1b 10.6) Marius CiepluchandClaude Opus 5 2026-09-16 17:35:00 +02:00
• b202aabd8b feat(pre-push-safety-net): bind the reachability boundary to what it limits (M1b 10.5) Marius CiepluchandClaude Opus 5 2026-09-16 17:26:16 +02:00
• c73efd2bde feat(pre-push-safety-net): export the enumerated operation inventory (M1b 10.4) Marius CiepluchandClaude Opus 5 2026-09-16 16:46:00 +02:00
• 86980d8aa0 feat(pre-push-safety-net): measure M1b step 1 and record the inventory prerequisite Marius CiepluchandClaude Opus 5 2026-09-16 16:03:16 +02:00
• 8ff1d9a638 feat(pre-push-safety-net): scope comparison completeness and ambiguity (M1b 10.2, 10.3) Marius CiepluchandClaude Opus 5 2026-09-16 15:45:57 +02:00
• 7e0d01d9e8 feat(pre-push-safety-net): classify an operation the change introduced (M1b 10.1) Marius CiepluchandClaude Opus 5 2026-09-16 15:38:13 +02:00
• 3224884d8f feat(pre-push-safety-net): record admission vetoes and meet M1a on NodeGoat Marius CiepluchandClaude Opus 5 2026-09-16 15:31:34 +02:00
• 8b66d5cb75 spec(pre-push-safety-net): record M1–M5 release milestones and split M1 into M1a/M1b Marius CiepluchandClaude Fable 5.1 2026-09-14 20:48:23 +02:00
• 1ad472c68d test(release): measure repaired reuse and local Joern lifecycle Marius Ciepluch 2026-09-14 13:18:51 +02:00
• 04f888019b release: prepare v1.2.0-alpha.1 and record rollout blockers v1.2.0-alpha.1 Marius Ciepluch 2026-09-14 08:13:26 +02:00
• 7c1c2d4475 fix(contributor-scan): retain declared Gruntfile and report census gaps honestly Marius Ciepluch 2026-09-14 08:07:06 +02:00
• 88216c5072 test(pre-push-safety-net): validate packaged outcome and retain rollout no-go Marius Ciepluch 2026-09-13 19:39:19 +02:00
• b506516d87 feat(pre-push-safety-net): enforce evidence eligibility and record blocked qualification Marius Ciepluch 2026-09-13 19:32:43 +02:00
• 2491ce497c feat(pre-push-safety-net): measure frozen runtime feasibility and retain no-go Marius Ciepluch 2026-09-13 19:06:02 +02:00
• 4e3b19da5b feat(pre-push-safety-net): cover combined push failure paths Marius Ciepluch 2026-09-13 18:43:13 +02:00
• fa074dd197 feat(pre-push-safety-net): bound optional assistance to admitted witnesses Marius Ciepluch 2026-09-13 18:03:31 +02:00
• 749c7ab45d feat(pre-push-safety-net): preserve existing hooks during explicit integration Marius Ciepluch 2026-09-13 17:51:28 +02:00
• f04955c367 feat(pre-push-safety-net): execute full Git push transactions Marius Ciepluch 2026-09-13 17:45:16 +02:00
• 530b9c9879 feat(pre-push-safety-net): reuse compatible artifacts throughout replay Marius Ciepluch 2026-09-13 17:08:49 +02:00
• 0ab5d56618 feat(pre-push-safety-net): key evidence reuse by compatible semantics Marius Ciepluch 2026-09-13 16:16:19 +02:00
• 6fb5ad2cff feat(pre-push-safety-net): publish and evict complete local artifacts safely Marius Ciepluch 2026-09-13 16:11:19 +02:00
• 8c9c91be91 feat(pre-push-safety-net): validate graph identity and isolated leases Marius Ciepluch 2026-09-13 16:05:51 +02:00
• 78a7dfc8c4 feat(pre-push-safety-net): measure frozen PMPro and Node replay feasibility Marius Ciepluch 2026-09-13 15:24:06 +02:00
• 8fe3a7e51e fix(pre-push-safety-net): stop semantic planning at the shared deadline Marius Ciepluch 2026-09-13 15:11:42 +02:00
• 31e5ec7430 feat(pre-push-safety-net): replay immutable revisions through the full transaction Marius Ciepluch 2026-09-13 14:50:25 +02:00
• 6b12b73411 feat(pre-push-safety-net): render bounded reports and preserve full evidence Marius Ciepluch 2026-09-13 13:25:44 +02:00
• d0e0ecad78 feat(pre-push-safety-net): admit only supported actionable changes Marius Ciepluch 2026-09-13 12:56:55 +02:00
• eb320730b6 feat(pre-push-safety-net): compare targeted base and head evidence Marius Ciepluch 2026-09-13 12:42:15 +02:00
• 6ba2b06353 feat(pre-push-safety-net): exclude vendor inputs and partition frontend coverage Marius Ciepluch 2026-09-13 11:53:29 +02:00